403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.00.30.txt
 ## swap threshold exceeded
## server overview
2025-11-16.00.30 load[0] mem[48/78] mysql[4/10] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1053         278          82        1032        1059
Swap:          1999        1652         347
 00:30:01 up 10:05,  0 users,  load average: 0.51, 0.45, 0.32
## system overview
top - 00:30:01 up 10:05,  0 users,  load average: 0.51, 0.45, 0.32
Tasks: 199 total,   3 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.7 us, 25.8 sy,  0.0 ni,  0.0 id,  6.5 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   282428 free,  1068628 used,  1069244 buff/cache
KiB Swap:  2047996 total,   355836 free,  1692160 used.  1094312 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 267888   3860 S 100.0 11.1   8:45.60 /usr/sbin+
 64583 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.05 /opt/cpan+
 64571 root      20   0  188860  12948   5540 R   6.2  0.5   0:00.05 /usr/loca+
     1 root      20   0   44412   3524   1660 S   0.0  0.1   0:50.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.26 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.77 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:37.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.64 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.72 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.75 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.39 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   358 root      20   0   39500   7060   6756 S   0.0  0.3   0:17.90 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    600    472 S   0.0  0.0   0:02.63 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.81 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1336    956 S   0.0  0.1   0:08.41 /usr/lib/+
   523 nscd      20   0 1264844   1948    908 S   0.0  0.1   0:29.96 /usr/sbin+
   524 root      20   0   52852    588    476 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:04.94 /usr/lib/+
   529 root      20   0  224148   5476   1168 S   0.0  0.2   0:00.43 queueproc+
   531 dbus      20   0   58740   1504    788 S   0.0  0.1   0:19.07 /usr/bin/+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.03 /usr/sbin+
   577 root      20   0   24208    124     96 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4084   1044 S   0.0  0.2   0:00.66 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:03.63 /usr/sbin+
   919 root      20   0 1350088   8156    200 S   0.0  0.3   0:20.04 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35776   5888 S   0.0  1.5   0:19.92 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.79 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.75 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:03.14 /usr/bin/+
   927 systuser  20   0  114016  15808   2772 S   0.0  0.7   0:08.59 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.43 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.29 /usr/bin/+
   946 root      20   0  396248    764    580 S   0.0  0.0   0:00.92 php-fpm: +
   954 named     20   0 1055796  39132   2072 S   0.0  1.6   0:18.43 /usr/sbin+
   957 root      20   0  314704   7796   6540 S   0.0  0.3   0:09.14 /usr/sbin+
   973 root      20   0  400740   2996    884 S   0.0  0.1   0:05.58 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:01.07 php-fpm: +
   978 cpanelc+  20   0   10456   3496   2244 S   0.0  0.1   0:29.22 /usr/loca+
   980 root      20   0  388892    912    696 S   0.0  0.0   0:01.11 php-fpm: +
   991 root      20   0  389508    644    552 S   0.0  0.0   0:00.99 php-fpm: +
   992 root      20   0 1763124  72508    384 S   0.0  3.0   0:14.11 /usr/loca+
   993 root      20   0  261288   7048   1940 S   0.0  0.3   0:07.55 cpsrvd (S+
  1065 dovenull  20   0   47524   3168   1796 S   0.0  0.1   0:00.67 dovecot/p+
  1066 dovenull  20   0   47948   3628   1964 S   0.0  0.1   0:00.40 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.11 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.41 dovecot/l+
  1069 dovenull  20   0   47600   3228   1828 S   0.0  0.1   0:00.55 dovecot/p+
  1070 dovenull  20   0   47816   3332   1844 S   0.0  0.1   0:00.34 dovecot/i+
  1077 root      20   0   24528   2624    524 S   0.0  0.1   0:00.22 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.08 dovecot/s+
  1150 root      20   0  248140  71172   1128 S   0.0  2.9   0:07.13 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.17 SonarPush+
  1152 dovecot   20   0   41180   1628   1132 S   0.0  0.1   0:00.85 dovecot/a+
  1153 wp-tool+  20   0  387556   5468   2112 S   0.0  0.2   0:00.34 /usr/bin/+
  1154 wp-tool+  20   0  410480  31264   2212 S   0.0  1.3   0:30.63 /usr/bin/+
  1229 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.37 cpdavd - +
  1231 root      20   0  209768  12600   2540 S   0.0  0.5   0:04.50 tailwatchd
  1232 root      20   0  167452   1484    884 S   0.0  0.1   0:00.53 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:00.97 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.56 /usr/sbin+
  1911 root      20   0   12812    508    364 S   0.0  0.0   0:04.27 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.73 /usr/loca+
  1913 root      20   0   12836    516    360 S   0.0  0.0   0:04.07 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  265880 102344   1276 S   0.0  4.2   0:04.13 spamd chi+
  8199 root      20   0  249268  81088    700 S   0.0  3.4   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.65 [kworker]
 38801 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 42409 root      20   0       0      0      0 R   0.0  0.0   0:00.02 [kworker/+
 47956 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48777 root      20   0  181208  29324   2352 S   0.0  1.2   0:01.98 lfd - sle+
 51600 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54136 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54523 worencom  20   0   38364   3676   2872 S   0.0  0.2   0:00.00 dovecot/i+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 58103 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58131 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 58420 nobody    20   0  277660  20764   4640 S   0.0  0.9   0:00.74 /usr/sbin+
 58444 nobody    20   0  277528  20448   4492 S   0.0  0.8   0:00.63 /usr/sbin+
 58446 nobody    20   0  277880  20724   4576 S   0.0  0.9   0:01.09 /usr/sbin+
 60031 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60286 root      20   0  153408    508    372 S   0.0  0.0   0:00.00 pure-ftpd+
 60287 root      20   0  153408    136      0 S   0.0  0.0   0:00.00 pure-ftpd+
 60496 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 60580 root      20   0  153408    508    372 S   0.0  0.0   0:00.00 pure-ftpd+
 60581 root      20   0  153408    136      0 S   0.0  0.0   0:00.00 pure-ftpd+
 61565 nobody    20   0  277832  20536   4368 S   0.0  0.8   0:00.30 /usr/sbin+
 61804 nobody    20   0  277852  20720   4428 S   0.0  0.9   0:00.21 /usr/sbin+
 62500 nobody    20   0  277908  20080   4196 S   0.0  0.8   0:00.14 /usr/sbin+
 62503 nobody    20   0  277736  20104   4084 S   0.0  0.8   0:00.11 /usr/sbin+
 62893 nobody    20   0  277512  20064   4288 S   0.0  0.8   0:00.13 /usr/sbin+
 63080 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63186 nobody    20   0  277892  19828   4004 S   0.0  0.8   0:00.16 /usr/sbin+
 63252 nobody    20   0  277892  19928   3996 S   0.0  0.8   0:00.09 /usr/sbin+
 63261 nobody    20   0  277404  19676   4020 S   0.0  0.8   0:00.22 /usr/sbin+
 63667 nobody    20   0  277452  19496   3892 S   0.0  0.8   0:00.17 /usr/sbin+
 63718 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 64113 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64207 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64267 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64268 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 64354 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64367 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 64411 mailnull  20   0   89500   5868   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 64428 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 64450 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 64467 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
 64475 root      20   0  183048   2152   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64477 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64478 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64479 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64482 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64483 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64484 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64485 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64486 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64487 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64488 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64489 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64490 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 64493 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 64530 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64531 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 64534 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64536 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64537 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64538 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64539 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64541 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64544 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64546 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 64550 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64551 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 64552 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 64556 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.02 /usr/loca+
 64563 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 64568 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 64579 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 64595 root      20   0  160224   2364   1636 S   0.0  0.1   0:00.00 top -n 2 +
 64628 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:37  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      38801  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kworker/1:4]
root      42409  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kworker/0:4]
root      47956  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kworker/u200:0]
root      51600  0.0  0.0      0     0 ?        S    00:05   0:00  \_ [kworker/0:2]
root      54136  0.0  0.0      0     0 ?        S    00:10   0:00  \_ [kworker/1:1]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      58103  0.0  0.0      0     0 ?        S    00:18   0:00  \_ [kworker/0:0]
root      58131  0.0  0.0      0     0 ?        S    00:18   0:00  \_ [kworker/1:2]
root      60031  0.0  0.0      0     0 ?        S    00:21   0:00  \_ [kworker/1:3]
root      60496  0.0  0.0      0     0 ?        S    00:22   0:00  \_ [kworker/0:3]
root      63080  0.0  0.0      0     0 ?        S    00:27   0:00  \_ [kworker/1:0]
root      64113  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44412  3524 ?        Ss   Nov15   0:50 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  7060 ?        Ss   Nov15   0:17 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   600 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:08 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1948 ?        Ssl  Nov15   0:29 /usr/sbin/nscd
root        524  0.0  0.0  52852   588 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  Nov15   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5476 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1504 ?        Ss   Nov15   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      64475  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64536  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      64563  0.0  0.0 108052   360 ?        S    00:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      64568  0.0  0.0 113288  1520 ?        S    00:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      64639  0.0  0.0 153840  2096 ?        R    00:30   0:00  |               \_ ps auxf
root      64477  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64540  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      64478  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64537  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      64479  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64538  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      64482  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64541  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      64483  0.0  0.0 183048  2156 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64534  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      64484  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64550  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      64485  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64530  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      64486  0.0  0.0 183048  2152 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64551  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      64487  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64552  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      64488  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64544  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      64489  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64539  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      64571  0.0  0.5 188860 12948 ?        R    00:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      64490  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64546  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      64556  0.0  0.4 188200 11080 ?        S    00:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      64595  0.0  0.0 160224  2364 ?        S    00:30   0:00  |           \_ top -n 2 -b -c
root      64493  0.0  0.0 183048  2148 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root      64531  0.0  0.0  20164   972 ?        Ss   00:30   0:00      \_ jailshell (nigeria) [64579] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64579  0.0  0.0  20164   260 ?        S    00:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   64583  0.0  0.6 404052 16136 ?        R    00:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   124 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4084 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  64411  0.0  0.2  89500  5868 ?        S    00:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:03 /usr/sbin/sshd -D
root      64207  0.0  0.1 111304  4268 ?        Ss   00:29   0:00  \_ sshd: [accepted]
root      64267  0.0  0.1 111304  4268 ?        Ss   00:29   0:00  \_ sshd: [accepted]
sshd      64268  0.0  0.1 115644  2632 ?        S    00:29   0:00  |   \_ sshd: [net]
root      64354  0.0  0.1 111304  4260 ?        Ss   00:29   0:00  \_ sshd: [accepted]
sshd      64367  0.0  0.1 115644  2628 ?        S    00:29   0:00  |   \_ sshd: [net]
root      64428  0.0  0.1 111304  4268 ?        Ss   00:29   0:00  \_ sshd: [accepted]
root        919  0.0  0.3 1350088 8156 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35776 ?       SLsl Nov15   0:19 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root      60286  0.0  0.0 153408   508 ?        S    00:21   0:00  \_ pure-ftpd (IDLE)
root      60287  0.0  0.0 153408   136 ?        S    00:21   0:00  |   \_ pure-ftpd (PRIV)
root      60580  0.0  0.0 153408   508 ?        S    00:22   0:00  \_ pure-ftpd (IDLE)
root      60581  0.0  0.0 153408   136 ?        S    00:22   0:00      \_ pure-ftpd (PRIV)
root        926  0.0  0.0 572372  1080 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15808 ?        Ssl  Nov15   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3168 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3628 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3228 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47816  3332 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2624 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1628 ?        S    Nov15   0:00  \_ dovecot/auth
worencom  54523  0.0  0.1  38364  3676 ?        S    00:11   0:00  \_ dovecot/imap
root      63718  0.0  0.1  60820  4512 ?        S    00:28   0:00  \_ dovecot/lmtp
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   764 ?        Ss   Nov15   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.6 1055796 39132 ?       Ssl  Nov15   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.3 314704  7796 ?        Ssl  Nov15   0:09 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  2996 ?        Ss   Nov15   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   64467  0.0  0.2 400460  5304 ?        S    00:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1784 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3496 ?        Ss   Nov15   0:29 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   912 ?        Rs   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   644 ?        Ss   Nov15   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  2.9 1763124 72508 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7048 ?        Ss   Nov15   0:07 cpsrvd (SSL) - waiting for connections                   
root      64450  0.0  0.0      0     0 ?        Z    00:29   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  2.9 248140 71172 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.2 265880 102344 ?       S    Nov15   0:04  \_ spamd child
root       8199  0.0  3.3 249268 81088 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5468 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 31264 ?        Ss   Nov15   0:30 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  1.0 262224 24616 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.5 209768 12600 ?        Ss   Nov15   0:04 tailwatchd
root       1232  0.0  0.0 167452  1484 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Rs   Nov15   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 267888 ?      Sl   Nov15   8:45 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   Nov15   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12812   508 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    Nov15   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12836   516 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    58420  0.1  0.8 277660 20764 ?        S    00:18   0:00  \_ /usr/sbin/httpd -k start
nobody    58444  0.0  0.8 277528 20448 ?        S    00:18   0:00  \_ /usr/sbin/httpd -k start
nobody    58446  0.1  0.8 277880 20724 ?        S    00:18   0:01  \_ /usr/sbin/httpd -k start
nobody    61565  0.0  0.8 277832 20536 ?        S    00:24   0:00  \_ /usr/sbin/httpd -k start
nobody    61804  0.0  0.8 277852 20720 ?        S    00:24   0:00  \_ /usr/sbin/httpd -k start
nobody    62500  0.0  0.8 277908 20080 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    62503  0.0  0.8 277736 20104 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    62893  0.0  0.8 277512 20064 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    63186  0.0  0.8 277892 19828 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    63252  0.0  0.8 277892 19928 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    63261  0.1  0.8 277404 19676 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    63667  0.1  0.8 277452 19496 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181208 29324 ?        Ss   00:00   0:01 lfd - sleeping
## mysql stats
Uptime: 36335  Threads: 2  Questions: 3337809  Slow queries: 0  Opens: 10451  Flush tables: 1  Open tables: 2000  Queries per second avg: 91.862
*************************** 1. row ***************************
     Id: 46937
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: cleaning up
   Info: NULL
*************************** 2. row ***************************
     Id: 46945
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.90.230 TIME_WAIT
      1 123.21.117.74 TIME_WAIT
      1 15.235.96.240 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.8.25.11 TIME_WAIT
      1 45.8.25.16 TIME_WAIT
      1 52.255.111.52 TIME_WAIT
      1 57.141.0.36 TIME_WAIT
      1 85.208.96.199 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 00:30:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 5 minutes 31 seconds
   Server load: 0.51 0.45 0.32
   Total accesses: 196446 - Total Traffic: 4.3 GB - Total Duration: 105840674
   CPU Usage: u2.54 s5.01 cu2399.35 cs2040.29 - 12.2% CPU load
   5.41 requests/sec - 122.8 kB/second - 22.7 kB/request - 538.777 ms/request
   6 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KK.K_.W_K._.C.__._..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  61565 33/101/9560 K 1.94 0     22  5068931 32.9 0.37  204.74 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /884936330?goodscode=0883777282 HTTP/1.1
   1-0  58420 1/229/9661  K 4.95 0     62  5314966 5.4  1.75  211.44 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /887785336?goodscode=0886622554 HTTP/1.1
   2-0  -     0/0/9219    . 0.00 103   0   4977319 0.0  0.00  205.97 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  63667 4/61/9398   K 1.23 1     21  4895662 8.1  0.10  203.20 66.249.70.8   http/1.1 test.cloudware.ng:443      GET /896724305?goodscode=0895549806 HTTP/1.1
   4-0  62893 0/45/10020  _ 0.81 2     1   5395934 0.0  0.21  211.86 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   5-0  -     0/0/8872    . 0.00 166   0   4965044 0.0  0.00  198.44 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  63186 0/55/9643   W 1.11 0     0   4994412 0.0  0.16  208.15 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  61804 0/63/8568   _ 1.01 0     394 4590401 0.0  0.80  186.29 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2723788117 HTTP/1.1
   8-0  58444 1/193/8666  K 3.95 3     23  4626700 0.7  1.29  188.97 66.249.70.5   http/1.1 test.cloudware.ng:80       GET /1833203786?goodscode=1830801922 HTTP/1.1
   9-0  -     0/0/8324    . 0.00 167   0   4398677 0.0  0.00  207.77 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 58446 0/379/8699  _ 7.78 0     0   4445362 0.0  1.44  197.36 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 -     0/0/8294    . 0.00 165   0   4464759 0.0  0.00  191.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 63252 1/24/7783   C 0.43 5     299 4582487 5.3  0.14  175.16 45.8.25.6     http/1.1 health.oyostate.gov.ng:443 GET /assets/fonts HTTP/1.1
   13-0 -     0/0/7964    . 0.00 160   0   4453981 0.0  0.00  182.80 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 62500 0/43/7315   _ 0.56 1     11  3795885 0.0  0.32  162.82 3.221.50.71   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/blog/2019elec
   15-0 63261 0/78/7248   _ 1.55 1     22  4079957 0.0  3.00  162.19 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /217072541?goodscode=0216788806 HTTP/1.1
   16-0 -     0/0/6890    . 0.00 232   0   3583653 0.0  0.00  152.68 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 62503 0/30/6450   _ 0.45 0     0   3177080 0.0  0.34  132.16 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   18-0 -     0/0/5824    . 0.00 233   0   3236679 0.0  0.00  138.42 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6563    . 0.00 163   0   3230154 0.0  0.00  132.23 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/3924    . 0.00 230   0   2222550 0.0  0.00  90.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/4054    . 0.00 170   0   2227056 0.0  0.00  92.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3807    . 0.00 235   0   2231173 0.0  0.00  95.20  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/4103    . 0.00 216   0   2264690 0.0  0.00  96.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/2483    . 0.00 234   0   1524414 0.0  0.00  60.33  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1233    . 0.00 236   0   661151  0.0  0.00  28.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1018    . 0.00 162   0   570230  0.0  0.00  24.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/652     . 0.00 569   0   362478  0.0  0.00  14.29  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/509     . 0.00 801   0   281598  0.0  0.00  11.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/458     . 0.00 841   0   254403  0.0  0.00  10.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1106    . 0.00 825   0   650529  0.0  0.00  26.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/476     . 0.00 559   0   195797  0.0  0.00  7.80   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/326     . 0.00 799   0   135048  0.0  0.00  4.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/147     . 0.00 820   0   83222   0.0  0.00  2.72   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/586     . 0.00 815   0   352682  0.0  0.00  11.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/222     . 0.00 834   0   116759  0.0  0.00  2.54   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/112     . 0.00 802   0   126228  0.0  0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/63      . 0.00 704   0   10786   0.0  0.00  0.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/29      . 0.00 849   0   15137   0.0  0.00  0.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/527     . 0.00 223   0   236253  0.0  0.00  9.69   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/125     . 0.00 716   0   109425  0.0  0.00  2.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/139     . 0.00 552   0   76178   0.0  0.00  1.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/123     . 0.00 804   0   72768   0.0  0.00  3.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/106     . 0.00 847   0   64987   0.0  0.00  2.45   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/41      . 0.00 861   0   9302    0.0  0.00  0.53   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/348     . 0.00 829   0   196796  0.0  0.00  8.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/22      . 0.00 811   0   14914   0.0  0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/21      . 0.00 830   0   5053    0.0  0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/194     . 0.00 225   0   41020   0.0  0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/48      . 0.00 848   0   55353   0.0  0.00  2.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/444     . 0.00 856   0   253169  0.0  0.00  9.85   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/35      . 0.00 832   0   12386   0.0  0.00  0.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/26      . 0.00 862   0   8755    0.0  0.00  0.36   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/118     . 0.00 833   0   57707   0.0  0.00  2.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/266     . 0.00 808   0   133476  0.0  0.00  5.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/410     . 0.00 835   0   301035  0.0  0.00  13.69  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/73      . 0.00 836   0   33087   0.0  0.00  0.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/27      . 0.00 813   0   8189    0.0  0.00  0.33   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/200     . 0.00 854   0   155909  0.0  0.00  4.53   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/16      . 0.00 857   0   14884   0.0  0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/155     . 0.00 853   0   87440   0.0  0.00  3.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/177     . 0.00 231   0   37690   0.0  0.00  1.47   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/116     . 0.00 858   0   68685   0.0  0.00  2.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/17      . 0.00 855   0   10304   0.0  0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/226     . 0.00 532   0   39016   0.0  0.00  1.65   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/65      . 0.00 810   0   4299    0.0  0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/48      . 0.00 718   0   13648   0.0  0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/10      . 0.00 859   0   56      0.0  0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/17      . 0.00 852   0   16258   0.0  0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/104     . 0.00 817   0   33893   0.0  0.00  1.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/59      . 0.00 860   0   64544   0.0  0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/922     . 0.00 851   0   492825  0.0  0.00  20.57  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/133     . 0.00 816   0   54728   0.0  0.00  1.76   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/140     . 0.00 819   0   93013   0.0  0.00  3.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/54      . 0.00 6719  0   42053   0.0  0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/13      . 0.00 6802  0   12308   0.0  0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/149     . 0.00 6803  0   87089   0.0  0.00  3.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/13      . 0.00 6823  0   1935    0.0  0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/16      . 0.00 6800  0   16052   0.0  0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/41      . 0.00 6686  0   30094   0.0  0.00  0.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/19      . 0.00 11426 0   6786    0.0  0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/359     . 0.00 10152 0   198767  0.0  0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/3       . 0.00 25345 0   23      0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3       . 0.00 25318 0   644     0.0  0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2       . 0.00 25337 0   3       0.0  0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7       . 0.00 25303 0   3861    0.0  0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 791
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...58)
   index usage: 13%, cache usage: 19%
   total entries stored since starting: 105535
   total entries replaced since starting: 0
   total entries expired since starting: 104701
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 473 miss
   total removes since starting: 43 hit, 55 miss
Youez - 2016 - github.com/yon3zu
LinuXploit